First come first served; the early bird gets the worm. Only the first person to submit the bug will get the bounty.
Hey Vortex,
I do not know too much about testing, but you should probably PM doogs. He is the best i have seen around and should be able to help you to plug the vulnerability. Also let him know there is a bounty involved and he should be able to get cracking.